Avionics gateway interface, systems and methods

ABSTRACT

Systems and methods are provided for FAA-certified avionics devices to safely interface with non-certified mobile telecommunications devices before, during, and after flight. Data transmitted to the certified devices do not affect functionality of the certified device unless and until a user acknowledges and/or confirms the data on the certified device. Thus, the integrity of the certified device is maintained.

CROSS-REFERENCES

This application claims priority pursuant to co-pending U.S. ProvisionalPatent Application Ser. No. 61/510,800, filed Jul. 22, 2011, and toco-pending U.S. Provisional Patent Application Ser. No. 61/674,340,filed Jul. 21, 2012, the entire disclosures of which are incorporatedherein by reference.

BACKGROUND Field

The present general inventive concept relates to gateway interfacesystems and methods for avionics devices. More particularly theinventive concept relates to methods and systems to interfacecommunications between FAA-certified and non-certified devices, systems,and equipment.

The United States Federal Aviation Administration (“FAA”) establishes,via regulations, certain minimum standards and requirements that must besatisfied by avionics devices, systems and equipment, particularly whenthe avionics device is essential or critical to flight safety. Forexample, FAR 23.1311(b) is a regulatory requirement that requires, amongother things, redundant backup instruments in the cockpit. As usedthroughout this specification, an “FAA-certified device” may include anyand all avionics devices, systems, and equipment that comply with FAAregulations and are approved for in-flight use. Approval may be securedvia a Technical Standard Order (TSO), Type Certificate (TC),Supplemental Type Certificate (STC), or other similar processes andprocedures. Examples of FAA-certified devices include (but are notlimited to) Multi-function Flight Displays (“MFD”) such as the EvolutionFlight Display (“EFD”) available from ASPEN AVIONICS, the KSN 770available from HONEYWELL BENDIX/KING, and the GNS 430/530 available fromGARMIN.

Third-party software developers have developed, and are expected tocontinually develop newer, software applications (also known as “apps”)for non-certified devices to enhance the flight experience. Applicationsthat can be used by pilots to add convenience and efficiency have beendeveloped for various mobile operating systems such as APPLE iOS,ANDROID, BLACKBERRY, and others. As used throughout this specification,a “non-certified device” may include any mobile electronicscommunications device. Examples of non-certified devices include (butare not limited to) cell phones, smart phones, BLACKBERRY mobilecommunications devices, IPADs, IPODs, IPHONEs, laptops, tablet PCs, andsimilar mobile computing platforms. Indeed, non-certified mobile devicesand many software applications have become quite popular and commonlyavailable in recent times.

The FAA strictly regulates interconnectivity of flight systems to ensurecertain minimum standards of flight safety. Unfortunately, because thevast majority of popular mobile communications devices are non-certifieddevices, the devices and their convenient software applications areunavailable for direct interfacing with FAA-certified devices withoutcompromising the integrity, reliability, and certification of theFAA-certified devices.

Mobile devices have revolutionized how pilots obtain and use data. Sincethere is no data link between these mobile devices and the installedavionics, their use in the cockpit has been limited by a lack ofintegration with onboard systems. The EVOLUTION FLIGHT DISPLAY (“EFD”)products available from ASPEN AVIONICS or other similar devices such asMulti-function Displays (MFD) and Primary Flight Displays (PFD) areinteroperable with a large variety of new and legacy avionics productsfrom multiple manufacturers, making them a natural gateway to certifiedflight data. Currently, there is demand for a non-certified, mobilecomputing device to wirelessly interface directly with FAA-certifieddevices during flight, but such a device is not available in the market.What is needed is a wireless bridge between handheld devices and theaircraft's certified avionics to increase the pilot's access to data andthe utility of the mobile devices.

SUMMARY

The present general inventive concept provides a platform (gateway orinterface) to enable two-way communications between non-certifieddevices and FAA-certified devices. One object of the general inventiveconcept is to seamlessly integrate non-certified devices withFAA-certified avionics devices without interfering with thefunctionality or otherwise compromising the integrity of theFAA-certified devices and systems. Another object of the generalinventive concept is to provide wireless connectivity (e.g., a mobilehotspot) for non-certified devices within the cockpit. Another object ofthe general inventive concept is to provide an electronics communicationinterface system that is sufficiently robust as to be highlycustomizable by end-users, and also largely compatible with numerousFAA-certified and non-certified devices and systems, whethercurrently-in-use or yet-to-be-developed.

In preferred embodiments, the gateway interfaces with FAA-certifieddevices without interfering with any functionality of the FAA-certifieddevices. Preferred embodiments of hardware interfaces includepre-determined specifications and software interfaces include a set ofApplication Programming Interface (“API”) rules and specifications thatguide interaction with the gateway, on both the non-certified end aswell as the FAA-certified end. To simplify the hardware and softwareinterfaces design, standardized protocols and rules are adhered towhenever possible. The use of application specific standards or formatsis avoided as much as possible.

In a preferred embodiment, the gateway enables communication between theFAA-certified devices and non-certified devices with both a hardwarecomponent and a software component. If instructions are sent to theFAA-certified device via the gateway that may impact any functionalityof the FAA-certified device, the instruction does not take effect on theFAA-certified device unless and until a user acknowledges and confirmsthe instructions via an FAA-certified device. The confirmation of theinstructions ensures that the user-acknowledged data or instructions arevalidated to be received accurately by the using FAA-certified deviceand the user informed of the status of the validation. In this manner,no activities of the non-certified device or the gateway can interferewith the functionality of the FAA-certified device absent a confirmationor acknowledgment from the FAA-certified device. In some embodiments,the gateway, as a hardware component, is certified by the FAA asnon-interfering with critical systems. The software code associated withthe gateway, requiring the acknowledgement/confirmation, is likewisecertified by the FAA as non-interfering with critical systems.

In a preferred embodiment, the hardware is enclosed in a small box thatis blind-mounted in the aircraft as a separate, stand-alone componentfrom the non-certified devices and FAA-certified devices that itintegrates together. The feature-rich hardware component containswireless, Bluetooth and USB connectivity options as well as flash memorystorage. It also includes commercially available technology such asstandard protocol ports and communications slots that will allow otherthird party companies to interface peripheral hardware as needed toenhance the utility of their own applications. It will be appreciatedthat in other embodiments the gateway of the instant invention will be ahardware and/or a software component that is integrated into aFAA-certified device, such as the EFD available from ASPEN AVIONICS.

Applications on non-certified devices allow users to interface with anaircraft's FAA-certified devices via the gateway. Some of these appsallow a user to upload and/or or modify flight planning data on his orher non-certified device and then synchronize this data with theaircraft's navigation and other FAA-certified devices via the gateway.Some of these apps allow a user to manage the aircraft logbook,maintenance records, and/or operational statistics on his or hernon-certified device via the gateway.

In preferred embodiments, the gateway provides wirelesstelecommunications connectivity for non-certified devices. For example,the wireless connectivity is provided via a WiFi network (e.g.,802.11a/b/g/n), 3G/4G mobile telecommunications network, iridiumsatellite telecommunications network, BLUETOOTH, or similar. In someembodiments, the gateway provides wired connectivity to non-certifieddevices. For example, the wired connectivity is provided via USB,Ethernet, or similar.

The foregoing and other objects are intended to be illustrative of thegeneral inventive concept and are not meant in a limiting sense. Manypossible embodiments of the invention may be made and will be readilyevident upon a study of this specification and accompanying drawingscomprising a part thereof. Various features and subcombinations may beemployed without reference to other features and subcombinations. Otherobjects and advantages of this invention will become apparent from thefollowing description taken in connection with the accompanyingdrawings, wherein is set forth by way of illustration and example, anembodiment of this invention and various features thereof.

BRIEF DESCRIPTION OF THE DRAWINGS

These and/or other aspects and utilities of the present generalinventive concept will become apparent and more readily appreciated fromthe following description of the embodiments, taken in conjunction withthe accompanying drawings. For the purpose of illustration, forms of thepresent general inventive concept which are presently preferred areshown in the drawings; it being understood, however, that the generalinventive concept is not limited to the precise arrangements andinstrumentalities shown. In the drawings:

FIG. 1 is an exemplary embodiment of the general inventive concept wherea mobile application is operated on a non-certified device in wirelesscommunication with a gateway which is then in hardwire communicationwith FAA-certified devices such as multi-function flight displays (viaEthernet) and/or navigation equipment (via ARINC429 or RS232).

FIG. 2 is the end-to-end flight experience employing non-certifieddevices enabled by a gateway of the general inventive concept.

FIG. 3 is an exemplary embodiment of the general inventive concept wherea gateway is used in the cockpit of an aircraft allowing a pilot tocoordinate tasks performed on non-certified devices before and afterflight with tasks performed during flight on non-certified devices andinterfacing with FAA-certified devices.

FIG. 4 is a detailed view of the gateway shown in FIG. 3.

FIG. 5 is another exemplary embodiment of a gateway of the presentgeneral inventive concept.

FIG. 6 is an embodiment of a gateway of the present general inventiveconcept with a single Ethernet port.

FIG. 7 is a detailed view of an Ethernet connectivity option of agateway of the present general inventive concept where a switch is addedto the gateway to provide additional Ethernet ports.

FIG. 8 is an embodiment of a gateway of the present general inventiveconcept configured to include three Ethernet ports.

FIG. 9 is a flow chart showing how a flight planning softwareapplication interfaces between a non-certified device and anFAA-certified device via a gateway of the present general inventiveconcept.

FIG. 10 is a flow chart showing how a flight planning serviceapplication functions on a gateway of the present general inventiveconcept.

FIG. 11 is a flow chart showing how a flight control/radio tuningsoftware application interfaces between a non-certified device and anFAA-certified device via a gateway of the present general inventiveconcept.

FIG. 12 is a flow chart showing how a radio tuning software serviceapplication functions on a gateway of the present general inventiveconcept.

FIG. 13 is a flow chart showing how a flight log book softwareapplication interfaces between a non-certified device and anFAA-certified device via a gateway of the present general inventiveconcept.

FIG. 14 is a flow chart showing one exemplary embodiment of securedaccess protocols for communication between a non-certified mobilecomputing device and a wireless gateway in a system of the presentgeneral inventive concept.

FIG. 15 shows an exemplary embodiment of a system of the present generalinventive concept.

DETAILED DESCRIPTION

This general inventive concept provides an electronic gateway interfacemodule designed to provide telecommunications connectivity betweencockpit avionics and mobile devices (i.e., between FAA-certified andnon-certified devices). One example of the general inventive concept isdescribed, in detail, in co-pending U.S. Provisional Patent ApplicationSer. No. 61/674,340, filed Jul. 21, 2012, the entire disclosure of whichis incorporated herein by reference.

Referring to FIG. 1, the gateway provides a hardwire telecommunicationslink to FAA-certified devices, such as ASPEN'S EFD, via an Ethernetinterface, or such as a navigation system, via an ARINC429 (RS-232)connection. The gateway also provides a telecommunications link tonon-certified devices, such as mobile phones, tablets, electronicnotebooks, laptops, or similar. In FIG. 1, the gateway provides awireless link to non-certified devices via WiFi (IEEE 802.11a/b/g/n).The gateway acts as a wireless access point providing a connection pointbetween wireless mobile devices and avionics equipment. In someembodiments the gateway utilizes standard security protocols and/orsecurity certification programs developed to secure wireless computernetworks, such as WPA, WPA2, WEP, etc. The gateway may be a standalonedevice or part of FAA-certified device including software used in thatFAA-certified device to provide gateway functionality as defined herein.

The gateway is designed to operate with a pre-defined ApplicationProgramming Interface (“API”). Third-party software developers use theAPI specifications to develop apps for mobile devices (i.e.,non-certified devices) that access data and functions on avionicsequipment (i.e., FAA-certified devices) that are connected to thegateway. For example, but not by way of limitation, if the gateway isconnected to ASPEN'S EFD, navigation and communications device data areaccessible via the EFD. In alternative examples, multiple FAA-certifieddevices are connected to and accessible via the gateway. The methodsused to acknowledge, confirm and validate are not limited to beingresident in ASPEN'S EFD. The methods, hardware and/or software, can beincluded as part of any FAA-certified device that operates as theFAA-certified interface

The gateway, when used in combination with third-party non-certifieddevices and existing and yet-to-be-developed third-party softwareapplications, allows users to streamline the end-to-end flightexperience. With the gateway, users can more efficiently coordinate andsynchronize efforts on-the-ground before and after flights. The gatewayallows users to use information necessary for flight and collectedduring flight as well as analytics available between flights. Referringto FIG. 2, before flight, a pilot uses non-certified devices toaccomplish tasks such as check the latest weather developments, plan aflight, finalize a flight route, file and obtain clearance, prepare andupdate charts and flight databases, plan for destination logistics,notify others of upcoming flight, confirm pilot and aircraftairworthiness, confirm aircraft availability, and plan for passengercomfort. Referring to FIG. 2, during flight, a pilot uses non-certifieddevices to interface with FAA-certified devices, via the gateway, toaccomplish tasks such as load flight plan and clearance to the avionicssystems, tune radios and communicate with others, review and performflight procedures, manage charts and flight databases, monitor fuel andengine operations, avoid weather, terrain, and obstacles, executechecklist, report and track position, communicate with people on theground, and keep passengers comfortable. Referring to FIG. 2, afterflight, a pilot uses non-certified devices to accomplish tasks such asclose the flight plan, flight log entry, notify others of arrival,arrange for ground transportation, review flight and debrief, and reportany incidents. Referring to FIG. 2, between flights, a pilot usesnon-certified devices and information gathered from avionics devices toaccomplish tasks such as review flight trends, share experience, analyzedata, maintain aircraft, maintain and enhance skills, maintain pilotstatus, and critique instructor.

In some embodiments, the general inventive concept also includes asecurity key feature. The security key feature provides an option for asubscription arrangement in using the gateway. If a user cancels thesubscription, then that user's specific security key is deactivated andthat user can no longer access the gateway. In some embodiments, thesecurity key feature is specific to each app (e.g., the app developer isissued the security key for a specific app). In other embodiments, thesecurity key feature is specific to each user (e.g., each mobile deviceis issued a unique security key regardless of what apps are used by thatdevice). If an app developer creates an app that somehow damages orimproperly interferes with the gateway or an FAA-certified device, therelevant security keys are deactivated and the problematic app and/oruser can no longer interface with the gateway. Thus, even if thedeveloper published a pirate app online, it does not function for anyuser thanks to this security key feature.

Referring to FIG. 3, a gateway of an embodiment the present generalinventive concept is installed in the cockpit of an aircraft andinterfaces with FAA-certified devices. The gateway provides a wirelessaccess point within the cockpit of the aircraft such that non-certifieddevices can access and communicate with FAA-certified devices of theaircraft. Alternatively or additionally, the gateway provides a wired(e.g., USB) connection for non-certified devices. The pilot performscertain tasks before flight, after flight, and between flights on anon-certified device. During flight, the pilot uses a non-certifieddevice to access information and functions of the FAA-certified devicesthat interface with the gateway.

For example, and not by way of limitation, in a preferred embodiment,the gateway complies with DO-160E environmental conditions requirements.In this example, the gateway meets the requirements under anon-interference mode. The gateway will not interfere with avionicsequipment, but may be susceptible to interference from other devices.The gateway is not certified as a critical device. The gateway is anon-essential, non-critical hardware and software component that shouldnot cause interference to the aircraft but whose function may bedegraded by noise or environmental conditions. Those skilled in the artwill recognize that other configurations and alternative embodiments areequally viable where the software and/or hardware are fully certified bythe FAA.

Referring to FIG. 4, a detailed view of the gateway of FIG. 3 isprovided. As shown in FIG. 4, the gateway includes a communicationmodule that provides in-aircraft telecommunications connectivity. Asshown in FIG. 4, in-aircraft telecommunications connectivity is WiFi,3G/4G cellular, Iridium satellite, or USB. The gateway is connected to apower supply. The power supply may be self contained within the gateway(e.g., battery operated), connected to any aircraft power supply system(including an FAA-certified device), or both (one or the other withbackup for redundancy). The gateway includes a processor and memorystorage, with optional additional external memory interface (e.g., amemory card).

According to FIG. 4, the gateway includes several available interfaceoptions for connectivity to FAA-certified devices. According to FIG. 4,the gateway connects directly to ASPEN'S EFD multi-function flightdisplay or other similar device via an Ethernet connection. According toFIG. 4, other FAA-certified devices are connected to the EFD or othersimilar device and are thus accessible via the gateway-EFD (or othersimilar device) connection. According to FIG. 4, some additionalFAA-certified devices, such as communication and navigation devices, areoptionally directly connected to the gateway via Ethernet, ARINC429(RS232), or other media interface.

In a preferred embodiment, the gateway module is based on the PARROTFC6100 processing platform. The FC6100 provides the system processor andseveral key electrical interconnects including a wireless interface(WiFi and BLUETOOTH). The FC6100 is hosted by a custom motherboarddesigned to provide power to the FC6100, connectors to interface toother modules, and external antennas for the BLUETOOTH and WiFi radios.FIG. 5 shows a block diagram of the gateway hardware. Optional items arenot required to support the basic functionality, but would provide amore flexible hardware solution allowing for application growth in thefuture.

Referring to FIG. 5, a preferred exemplary embodiment of a gateway ofthe present general inventive concept is provided by way of example, andnot by way of limitation. According to the example shown in FIG. 5, thegateway includes a PARROT FC6100 processor chip. According to theexample shown in FIG. 5, the gateway includes a MARVELL radio-frequencyintegrated circuit. According to FIG. 4, the gateway includes a powersupply to provide power to the processor, the USB connections, and theEthernet connections. According to FIG. 5, the gateway includesconnections for USB, SPI (SR232), APPLE I2C chip for iPOD/iPHONE port,audio ports (Line In: 2 mic and 2 stereo/Line Out: audio panel), digitalaudio ports, external memory card slots (SD ×2), visual display(LCD/touchscreen), and camera (infrared and/or visible camera).According to FIG. 5, one of the two USB ports connects to an Ethernetadapter with USB hub to provide multiple Ethernet connection ports andadditional USB ports. These multiple Ethernet ports connect to ASPEN'SEFD and/or other FAA-certified devices. The additional USB ports areused for software updates, iPOD/iPAD interface, additional externalmemory devices, digital media players, 3G/4G cellular network, and/orIridium Satellite phone connections. According to FIG. 5, the gatewayprovides an access point to a wireless network via WiFi and/orBLUETOOTH.

In the preferred embodiment, the gateway includes two SD card slots forinternal data storage. The purpose of the primary card is to storeAndroid OS, user applications, and application data. The purpose of thesecondary card is to store application data, flight logs, data recorder,information, and entertainment media. In the preferred embodiment, thegateway includes a connection to standard avionics audio panels. Thisfeature is used to support multimedia applications. The gateway streamsmedia from connected mobile devices, a local SD card, or from Bluetoothconnected devices. In addition, a microphone input is used for voicecontrolled functionality (i.e., voice-recognition). In the preferredembodiment, the gateway includes an ARINC 429 interface to allow thegateway to be installed in aircraft without an ASPEN EFD, allowing thegateway to interface directly with legacy avionics equipment, such asair data, inertial, navigation, flight control, or other similaraircraft computing systems.

FIG. 6 shows an embodiment of a gateway of the present general inventiveconcept with a single Ethernet port. FIG. 7 shows a detailed view of anEthernet connectivity option of a gateway of the present generalinventive concept where a switch is added to the gateway to provideadditional Ethernet ports. FIG. 8 shows an embodiment of a gateway ofthe present general inventive concept configured to include threeEthernet ports.

By way of example, and not by way of limitation, an EFD or other similardevice includes multiple screen configurations that are certifiedscreens (on a certified device, displaying certified data, in acertified format). In this example, the EFD or other similar devicefurther includes an additional non-certified screen. The non-certifiedscreen displays information from the app off of the non-certifieddevice. The additional non-certified screen is uncertified. It includesuncertified controls in order to control the uncertified display. Oneskilled in the art will recognize that this is but one example and thatmany other examples are available.

Software applications developed for non-certified devices are common. Byinterfacing directly with FAA-certified devices via a gateway of thepresent general inventive concept, a number of software applicationshave been developed to enhance the flight experience. Several examplesof software applications are provided herein, however, it should berecognized that many other software applications will also benefit frominterfacing with the gateway.

Most applications running on the gateway, itself, function as AndroidServices. Services are application components that perform backgroundoperations and do not have user interfaces. The services provide thefunctionality required to transfer data between non-certified devicesand FAA-certified devices.

Example 1 Flight Planning Application

The flight planning application allows a pilot to perform standardflight planning activities on an application running on a non-certifieddevice. When the non-certified device is connected to the gateway, theflight plan is synchronized with the connected Navigation device (i.e.,FAA-certified). If the pilot desires to make further updates, he or shedoes so directly on the Navigation device (FAA-certified) or through themobile application (non-certified). All changes are continuouslysynchronized in real time between the mobile application and theNavigation unit through the gateway.

Referring to FIG. 9, a flow chart showing how a flight planning softwareapplication interfaces between a non-certified device and anFAA-certified device via a gateway of the present general inventiveconcept is provided. According to FIG. 9, a pilot creates or updates aflight plan on a mobile, non-certified device. The non-certified deviceis connected to the gateway. Preferably, the non-certified deviceconnects to the gateway wirelessly, via WiFi or BlueTooth, however, ahardwire USB connection or other connection is possible. According toFIG. 9, the software application sends a request to the gatewayindicating a new (or updated) flight plan (this can be initiatedautomatically by the software application, or manually by input from thepilot). A software/firmware application (or service) on the gatewayprocesses the planned update request from the non-certified device andforwards the request to the FAA-certified device (e.g., ASPEN'S EFD orother similar device). According to FIG. 9, the FAA-certified device(e.g., ASPEN'S EFD or other similar device) receives the new or updatedflight plan from the gateway. Before any changes take effect, theFAA-certified devices requests user acknowledgement and confirmation.Only after acknowledgement is received on an FAA-certified device is theNavigation system updated with the new or updated flight plan.

According to FIG. 9, after the pilot acknowledges the changes on the EFDor other similar device, the navigation system is updated with the newor updated flight plan. The EFD or other similar device is updated withplan changes and appropriate flags and indicators are set. The EFD orother similar device provides flight plan updates to the gateway. Thegateway processes the flight plan updates from the EFD or other similardevice and communicates with the mobile application to update the flightplan on the non-certified device. In this manner, a flight plan issynchronized on both non-certified devices and FAA-certified devices,before and during flight.

The step of acknowledgement on the FAA-certified device maintains thecertified status of the FAA-certified equipment. The non-certifieddevice does not interfere with any of the FAA-certified devices. Thenon-certified device is not allowed to make any changes or adjustmentsto any FAA-certified device other than to present data to be previewedand acted upon by the pilot. The acknowledgement on the FAA-certifieddevice allows changes to information or functionality of theFAA-certified device, not anything received directly from anynon-certified device. It will be appreciated that in various embodimentsof the inventive concept information/data will flow from thenon-certified device (e.g. an iPad) to the FAA-certified (e.g. EFD orother similar device) in various manners. In some embodiments,information/data is uploaded from the non-certified device to thegateway and stored in a memory device in the gateway until the pilotacknowledges the request. At that point, when acknowledgement ismade/completed, the information is uploaded from the gateway into theFAA-certified device. In some embodiments, multiple copies of theinformation are kept on any or all of the FAA-certified device, thenon-certified device and the gateway and are “synced” togetherperiodically to keep all copies current. In other embodiments,information/data from the non-certified device is stored on the gatewayand small packets of data are released in increments to theFAA-certified device from the gateway post-acknowledgement as such datais needed by the FAA-certified device. It will further be appreciatedthat in some embodiments of the instant inventive concept, the gateway(or a software application/service on the gateway) pushes the requestfor acknowledgement to the FAA-certified device. In other embodiments,the gateway pushes the information/data to the FAA-certified device, andupon receipt of such new information/data, the FAA-certified devicegenerates the request for acknowledgement before accepting said data. Itwill be appreciated that in such embodiments in which the FAA-certifieddevice generates the request for acknowledgement, the newinformation/data may be stored in a temporary memory location in theFAA-certified device until acknowledgement is completed.

On the gateway, the flight planner service will facilitate thecoordination of flight plans between the Navigation unit and the mobileapplication. The gateway will act as a conduit for Navigation flightplans. This service will act much like a web server responding to clientpull requests from a mobile application. Requests will take two forms,request for current Navigation flight plan and request for a Navigationflight plan update which will be accompanied by a new flight plan. Thegateway service converts, if necessary, from a format used tocommunicate with the mobile app to the EFD format. The flight plannerservice must verify the integrity of the new flight plan before sendingto the EFD/Navigation unit. The gateway may poll the EFD and cacheresults to allow for timely responses to mobile app requests. Referringto FIG. 10, a flow chart showing how the gateway flight planner servicefunctions is shown.

Example 2 Flight Control Application

The flight control application provides control over the communicationsequipment. This functionality may optionally also be combined with theflight planning application but preferably is separate. The flightcontrol application allows the pilot to tune the radio to theappropriate frequencies via the gateway.

Referring to FIG. 11, a flow chart showing how a flight control/radiotuning software application of one embodiment of the instant inventiveconcept interfaces between a non-certified device and an FAA-certifieddevice via a gateway of the present general inventive concept is shown.According to FIG. 11, a pilot tunes or selects a radio frequency using asoftware application on a non-certified device (this can be done in realtime on the non-certified device, or alternatively may have beenpredetermined during the pilots preflight planning on the non-certifieddevice and then initiated automatically by the software applicationbased upon location or some other predetermined flight status criteria).The application connects the non-certified device to the gateway torequest a radio frequency change. The gateway processes the radiofrequency tuner change request and connects to the EFD or other similardevice (FAA-certified device). The EFD or other similar device receivesthe radio frequency tuner change request and requests useracknowledgement via an FAA-certified device (e.g., the EFD or othersimilar device). Only after the pilot confirms the radio tuner frequencychange on the EFD or other similar device is the radio frequency changedto the new frequency. In some embodiments, the gateway then communicatesdirectly with the radio to change the frequency. The EFD or othersimilar device provides an update to the gateway and the gateway updatesthe non-certified device. In other embodiments, the EFD or other similardevice communicates with the radio (a “downstream” device to the EFD) tochange the frequency. In an alternative embodiment, instead of sending achange request to the EFD or other similar device for the user toacknowledge, the gateway pushes the selected radio frequency to a“standby” frequency control of the radio, which is activated (or, from abroad perspective, “acknowledged) by the pilot/user byselecting/operating a control on the radio user interface that activatesthe standby frequency.

On the gateway, navigation and communication radio frequencies will beaccessed through the flight control service. A mobile application willprovide an interface for selecting radio frequencies. The applicationwill issue a radio frequency change request to the gateway, which willin turn send a packet to the EFD or other similar device with the radiotuning message. The EFD or other similar device will command theNavigation radio through an ARINC 429 or RS-232 serial bus. The gatewaywill respond to the application that the request was completed by theEFD or other similar device. By way of example, and not by way oflimitation, the application also has the ability to query the currentactive radio frequency from the Navigation radio unit. Referring to FIG.12, a flow chart showing how a radio tuning software service applicationfunctions on a gateway of the present general inventive concept isprovided.

One skilled in the art will recognize that this is but one example ofhow the flight control application may be implemented. In otherembodiments, the acknowledgement does not occur through the EFD or othersimilar device for radio tuning. Instead, the frequency is automaticallypushed to the “standby” window of the radio's Nav/Com. The pilotacknowledges the frequency by activating the frequency on the radio from“standby” to “active”. One skilled in the art will readily recognizethat many other embodiments are available.

Example 3 Pilot's Logbook Application

Referring to FIG. 13, a flow chart showing how a flight log booksoftware application interfaces between a non-certified device and anFAA-certified device via a gateway of the present general inventiveconcept is provided. According to FIG. 13, a pilot initiates logging viaa software application on a non-certified device (this can be done inreal time on the non-certified device, or alternatively may have beenpredetermined during the pilot's preflight planning on the non-certifieddevice and then initiated automatically by the software applicationbased upon location or some other predetermined flight status criteria).The logging app records pilot hours and aircraft performance data. Theapplication sends a request to the gateway to initiate logging. Thegateway processes the request and requests aircraft and/or engine statusfrom the EFD or other similar device. The EFD or other similar devicereceives the request and seeks confirmation from the pilot on the EFD(FAA-certified device). Only after receiving pilot acknowledgement onthe EFD does the EFD provide aircraft and/or engine status (or otherinformation to be logged) to the gateway. The gateway stores the loginformation on an external memory card or forwards it on to thenon-certified device for storage.

In some embodiments, the method includes a method for implementingclient authentication protocols with a mobile web server of a gatewaydevice of an embodiment of the invention. Referring to FIG. 14, themethod allows for client authentication with a mobile web server of agateway that does not have its own internet connection. The system iscomprised of three computing nodes: a) a license server issuing licensekeys to client devices; b) a client device (mobile computing device,tablet, smart phone, etc.) accessing data resources within a mobileserver; and c) a mobile web server authenticating and servicing clientrequests for data. The mobile web server authenticates the clientwithout having access to a certificate authority.

The mobile webserver is a component of the gateway, which is connectedto a FAA-certified device. In a preferred embodiment the connectionbetween the gateway and the FAA-certified device is a hard wiredEthernet connection; however it will be appreciated that otherembodiments utilize a wireless connection. In a preferred embodiment,the client device (or devices) is connected to the mobile server via awireless connection. Nevertheless, it will be appreciated that otherembodiments utilize a wired connection.

In some embodiments, the mobile web server prevents client devices (e.g.non-certified mobile computing devices) from accessing any functionalityof the gateway if the mobile server has not authenticated the clientdevice. In other embodiments, mobile devices that are not authenticatedare only prevented from accessing data resources of the mobile server,such as communicating with (i.e. accessing data from, reading from,writing to and/or transmitting to) FAA-certified devices connected tothe gateway and/or accessing any data stored on or accessible by thegateway from or relating to the FAA-certified devices, but otherwise areallowed to access functionality of the gateway that is separate from themobile service and/or FAA-certified devices. For example, in oneembodiment, a client device that has not been authenticated is permittedto network (assuming the device has been authenticated through any othersecurity protocols for connecting to the gateway—such as WPA or WPA2SSID and password if the network connection is a wireless connection)with other non-authenticated mobile devices (e.g. as in a typicalcomputer network) and/or with an Internet connection that is connectedto the gateway (if the gateway is so connected). In this manner, thegateway may function as network router between non-authenticated mobiledevices (such as those used by aircraft passengers) and entertainment orother non-FAA certified data resources, while at the same timefunctioning as a platform for two-way communication betweenauthenticated non-certified devices and FAA certified devices/resources.

Referring to FIG. 14, the method includes generating an encryptedlicense key for a mobile server in operable data connection with saidFAA-certified device. An encrypted license key is generated for eachmobile server device. The key is a hash of something specific to themobile server device (Serial Number, MAC address, etc.). The algorithmfor generating the key can remain proprietary to the gatewaymanufacturer and need not be shared with the general public. Thealgorithm for generating the license key is known only to the mobileserver (i.e. stored in memory of the mobile server) and the licenseserver. The client device does not decrypt the key. The algorithm fordecrypting the key is not held within the client device applicationcode, preventing the algorithm from being reverse engineered from thebinary.

The license key is hosted on a license server. The client deviceconnects to the license server (via an Internet connection or othersuitable data connection) and downloads the key from the license serverafter providing authorization credentials (Account information, SN, MACaddress, etc., from the purchased mobile device server documentation) tothe license server. A client app on the client device downloads the keyand stores it within cache on the mobile device. The connection betweenthe client device and license server is encrypted with SSL or anothersuitable method to preserve the integrity of the key. The client deviceestablishes a connection with the mobile server and requests access tocertain targeted data resources. The license key is issued with eachrequest or is cached for each session. The network session is encryptedwith SSL or another method to preserve the integrity of the license keyas it is passed from the client to mobile server. If the networkconnection is wireless, the channel is encrypted. The mobile serverdecrypts and validates the key before authorizing access.

In some embodiments, the general inventive concept provides a system fortransmitting and receiving aircraft data communications between cockpitavionics and mobile devices (i.e., between FAA-certified andnon-certified devices). Referring to FIG. 15, the system includes anFAA-certified device that provides AHRS, ADC, navigation, communicationor flight plan data. The FAA-certified device is configured to restrictreceiving data from non-certified devices such that non-certifieddevices do not interfere with normal operation of the FAA-certifieddevice. The system also includes at least one non-certified mobilecomputing device that is configured to send and receive data.

The system includes a display that is configured to display data that istargeted to be received by the FAA-certified device from thenon-certified mobile computing device. The display is a piece ofhardware that allows user inputs as a confirmation so that the pilot canaccept or reject the targeted data prior to loading the targeted data tothe FAA-certified device. If the targeted data is accepted, then thetargeted data is allowed to change information or functionality of theFAA-certified device. However, if the targeted data is not accepted orif it is rejected by the user, then the targeted data is not allowed tochange information or functionality of any FAA-certified device. Thisdisplay hardware is installed on a multi-function display, such as theASPEN Evolution Backup Display, or any other similar device.

Referring to FIG. 15, the display is sometimes referred to as ascratchpad hardware. Any device that can display textual information(with graphic display a useful option) and can accept at least twodistinct user responses (Yes and No) can be used for this function. Thesoftware functionality it needs to support is intentionally minimal fortwo reasons. First, it will place a very low burden on the display(scratchpad hardware) memory and graphics function. Second, the gatewaycan be used with multiple avionics display manufacturers with reducedrisk of incompatibility. The display simply needs to accept a smallnumber of well-defined inputs from the gateway, display them for theuser (text only or, if capable, text and appropriate graphics) andtransmit the user's Yes or No response back to the gateway.

The system includes an FAA-certified gateway hardware device. Thegateway is configured to provide a secure data communication connectionwith the non-certified mobile computing device. The gateway is alsoconfigured to provide a separate secure data communication connectionwith the FAA-certified device. In some embodiments, the gateway isconfigured to provide a data filter or a firewall. In some embodiments,one or more of the secure data communication connections is a wirelessdata connection. In some embodiments, one or more of the secure datacommunication connections is a hard-wired data connection. In someembodiments, the gateway includes a secure data communication connectionwith the internet (i.e., the world wide web).

The gateway hardware includes a basic compute module, including RAM andflash memory, and I/Os. It includes sufficient processing power andmemory to support relatively significant compute loads while havingsubstantial reserve capacity for future expansion. I/O is supported viaEthernet, RS232, USB, ARINC and/or 429. Other interfaces includeBluetooth, cellular and Iridium. It supports a secure Wi-Fi connectionto the non-certified device.

The gateway device includes software. It includes an operating system.In some embodiments, the operating system is ANDROID-based. The gatewayalso includes software to provide the secure data communicationconnection with the FAA-certified device. It also includes software toprovide the secure data communication connection with the non-certifiedmobile computing device. It also includes software to provide targeteddata confirmation protocols. The gateway software provides secureexternal and internal communications support, firewall services,verification services via internal filters and interaction with thedisplay, reading and writing of data to and from the FAA-certifieddevice after user confirmation/verification. The gateway softwareprovides translation to and from function specific, capability driven“neutral” data formats and support of a Persistent Data Store (PDS) orlocalized memory store.

In some embodiments, sensor data, such as ADC, AHRS, OAT and/ornavigator LAT/LONG is stored in a predetermined memory storage device,located locally on the gateway or elsewhere in the system. The sensordata may be obtained directly from sensors connected to the gateway ofthe instant invention, or alternatively may be obtained by sensorsconnected to FAA-certified devices connected to the gateway. The datastored in the predetermined memory storage is available for bulk load byapplications for later analysis as well as being available toapplication on a non-real time basis. In some embodiments, this latteris critical due to the non-multitasking nature of iOS (e.g. if a usersuspends an application that is monitoring sensor streams by switchingto another application, the monitoring application needs to be able toplay “catch-up” when it is reactivated). The data store also maintainscurrent and historical flight plan data in a pre-defined universalformat which allows loading into a targeted navigator, or cross loadingbetween navigators of different compatibilities, on a “capabilities”based basis.

In some embodiments of the invention, in which data in the data storeoriginates from an FAA-certified device, the data store maintains a copyof the data that is on the FAA-certified device. In other embodiments,the data store maintains a matrix, lookup table, or pointer to the datathat is stored in the FAA-certified device, without actually copying thedata. In other embodiments, the data store maintains a copy of some dataand a lookup table/pointer to other data of the FAA-certified device. Inthis manner, the non-certified mobile computing device can access andeven manipulate the data within the data store, but not manipulate thedata on the FAA-certified device without first receiving properauthorization through the targeted data confirmation protocols of theinvention (as is discussed above). In some embodiments, when a change todata is made through the use of the non-certified mobile computingdevice, the software of the gateway device utilizes the scratchpadhardware discussed above with respect to FIG. 15 to obtain authorizationto make a change to the data that is stored on the FAA-certified device.

The memory storage device of the gateway is a secure, persistent datastore located inside and/or outside the certified environment data. Inembodiments in which the PDS is located outside the certifiedenvironment data (such as in a gateway of the instant invention) outsidevalidation of data with, for example, CRC codes is preferred before datamay be written to and/or edited within the certified environment. Insome embodiments, the memory storage device is physically contained in asection of flash memory located in the gateway. It is accessed bygateway software as well as by applications running inside the connectednon-certified device. It will be appreciated that a gateway of theinstant invention may include multiple PDS and/or other storageenvironments. For example, in some embodiments, the gateway includes onePDS that is accessible and may be edited by the applications running onthe connected non-certified device(s), and another PDS that is in anFAA-certified environment and therefore only accessible by (forreceiving, reading, writing and/or transmitting data to or from)FAA-certified devices.

The memory storage device serves several main functions. In someembodiments, it stores installation (including aircraft type andregistration number) and user defined configuration data. One portion isconfigured at installation time while the other is user editable, and isaccessed from the non-certified device via a secure, password controlledprogram. The user configuration includes a variety of items such asfrequency of waypoint, attitude, ADC, OAT info, frequency of sampling ofEngine parameters, Retention cycle, etc.

In some embodiments, the memory storage device stores applicationconfiguration and state data. This allows multiple non-certified devicesto be used with a single gateway on the same airplane. This also allowsone to shift from one non-certified device to another during flightwithout losing key data (e.g. having a backup Tablet Computer). In someembodiments, it provides a place where an application can store anyinformation it chooses. This store is divided into two sections—privateand public. The private space is accessible only by the owningapplication. The other section is available to any application, whetheron the originating Tablet Computer or another one. This, in effect,provides an interprocess communication channel between applications. Insome embodiments, the store includes an extensible XML construct toallow the originating application to tag the data in the public area.There is a data registry associated with these public spaces soapplications can query what public space data might be available tothem.

In some embodiments, the memory storage device includes waypoint,attitude and engine data from each flight. This information isretrievable by each application but is only written by the FAA-certifieddevice(s).

In some embodiments, the memory storage device includes incoming COMaudio in digitized form, available when a compatible Audio Panel isinstalled. In some embodiments, it also contains the textual content ofthe message derived from the Speech Recognition engine running in thegateway as well as the parsed info and message categorization tag fromthe parsing engine, also running in the gateway.

In some embodiments, the memory storage device includes flight plansstored in a format such as ARINC 424 to allow for flight plan validationand interchange. By doing this, and tagging the active one(s) andidentifying which Navigator it is loaded into, it simplifies interactionwith non-certified device applications. Further, by storing the flightplans in the “neutral language” it solves the back translation issuefrom “synthetic” flight plans to the base definition. In someembodiments, the flight plan is tagged when loaded into the navigatorfor correlation to the base.

In some embodiments, pre-defined APIs are established for reading andwriting data to and from the memory storage device along withappropriate validation filters to assure only verified and correct datareceived from the non-certified device application(s) is stored in theFAA-certified environment.

Referring to FIG. 15, the gateway includes an interface, bi-directionalwhere appropriate, to FAA-certified NAV/COM/GPS devices and other ship'ssensors, such as engine sensors, attitude information, ADC information,OAT, etc. This is used to read data from the sensors, and, whereappropriate, write data to these sensors. An example of this is thewriting of flight plans to navigators and the tuning of NAV and COMradios. The gateway also includes one or more interface to allowinteraction with the Audio Panel. The system supports digitization plusstorage and playback of incoming COM transmissions. In some embodiments,the digitization, storage and/or playback is handled on thenon-certified device.

The exemplary embodiment and various other embodiments of the presentgeneral inventive concept is implemented as a software algorithm, e.g.,computer readable codes, on a computer readable medium, such as onfirmware of the avionics devices discussed above. Various otherembodiments of the present general inventive concept can be embodied ascomputer readable codes on a computer readable medium and/or computerreadable recording medium (collectively “computer readable recordingmedium” hereafter). The computer readable recording medium may includeany data storage device suitable to store data that can be thereafterread by a computer system. Examples of the computer readable recordingmedium include, but are not limited to, a read-only memory (ROM), arandom-access memory (RAM), CD-ROMs, magnetic tapes, floppy disks,optical data storage devices, and carrier waves (such as datatransmission through the Internet). The computer readable recordingmedium can also be distributed over network coupled computer systems sothat the computer readable code is stored and executed in a distributedfashion. Various embodiments of the present general inventive conceptmay also be embodied in hardware or in a combination of hardware andsoftware

Thus, while the present general inventive concept has been shown in thedrawings and fully described above with particularity and detail inconnection with what is presently deemed to be the most practical andpreferred embodiment(s) of the invention, it will be apparent to thoseof ordinary skill in the art that many modifications thereof may be madewithout departing from the principles and concepts set forth herein,including, but not limited to, variations in size, materials, shape,form, function and manner of operation, assembly and use.

It is also to be understood that the following claims are intended tocover all of the generic and specific features of the invention hereindescribed, and all statements of the scope of the invention which, as amatter of language, might be said to fall therebetween. Hence, theproper scope of the present general inventive concept should bedetermined only by the broadest interpretation of the appended claims soas to encompass all such modifications as well as all relationshipsequivalent to those illustrated in the drawings and described in thespecification.

Finally, it will be appreciated that the purpose of the annexed Abstractis to enable the U.S. Patent and Trademark Office and the publicgenerally, and especially the scientists, engineers and practitioners inthe art who are not familiar with patent or legal terms or phraseology,to determine quickly from a cursory inspection the nature and essence ofthe technical disclosure of the application. Accordingly, the Abstractis neither intended to define the invention or the application, whichonly is measured by the claims, nor is it intended to be limiting as tothe scope of the invention in any way.

1. A method of processing information on-board an aircraft comprisingthe steps of: providing an avionics device installed in said aircraft,wherein said avionics device is an FAA-certified device; operablyconnecting a non-certified device within said aircraft to saidFAA-certified device; generating non-certified information on saidnon-certified device; generating FAA-certified information on saidFAA-certified device; transmitting and receiving electronic packets ofnon-certified information from said non-certified device to saidFAA-certified device; generating a request for a user acknowledgement orconfirmation on said FAA-certified device after said FAA-certifieddevice receives said non-certified information; and allowing changes toinformation or functionality of said FAA-certified device only aftersaid user acknowledgement or confirmation is completed.
 2. The method asclaimed in claim 1 wherein said step of generating a request for useracknowledgement or confirmation is accomplished by a gateway service. 3.The method as claimed in claim 1 wherein said step of generating arequest for user acknowledgement or confirmation is accomplished by saidFAA-certified device.
 4. The method as claimed in claim 3 wherein saidstep of generating a request for user acknowledgement or confirmation isaccomplished by said FAA-certified device and wherein said step oftransmitting and receiving electronic packets of non-certifiedinformation from said non-certified device to said FAA-certified deviceis accomplished through a gateway.
 5. The method as claimed in claim 1wherein said step of operably connecting a non-certified device to saidFAA-certified device comprises: generating an encrypted license key fora mobile server in operable data connection with said FAA-certifieddevice; hosting said license key on a license server; providingauthorization credentials of the non-certified device to said licenseserver; downloading said license key from said license server to saidnon-certified device; storing said license key within cache on saidnon-certified device; establishing a data connection between said mobileserver and said non-certified device; providing said license key to saidmobile server for validation; requesting access by said non-certifieddevice to one or more data resources available via said mobile server inoperable data connection with said FAA-certified device; and decryptingand validating said license key by said mobile server before authorizingnon-certified device access to said one or more data resources availablevia said mobile server in operable data connection with saidFAA-certified device.
 6. A method of displaying information on-board anaircraft comprising the steps of: providing an avionics device installedin said aircraft, wherein said avionics device is an FAA-certifieddevice; operably connecting a non-certified device within said aircraftto said FAA-certified device; transmitting information from saidnon-certified device to said FAA-certified device; and transmittinginformation from said FAA-certified device to said non-certified device.7. The method as claimed in claim 6, wherein said transmitting steps areperformed through a gateway device.
 8. The method as claimed in claim 6,further comprising the steps of: generating a request for a useracknowledgement or confirmation on said FAA-certified device after saidFAA-certified device receives said non-certified information; andallowing changes to information or functionality of said FAA-certifieddevice only after said user acknowledgement or confirmation iscompleted.
 9. The method as claimed in claim 6, further comprising thesteps of: generating a request for a user acknowledgement orconfirmation on said FAA-certified device after said FAA-certifieddevice receives said non-certified information; and allowing changes toinformation or functionality of a second FAA-certified device connectedto said FAA-certified device only after said user acknowledgement orconfirmation is completed.
 10. The method as claimed in claim 6, furthercomprising the steps of: connecting said avionics device to an avionicsdisplay installed in said aircraft, wherein said avionics display isnon-certified; and displaying said information transmitted from saidnon-certified device on said avionics display.
 11. The method as claimedin claim 6 wherein said step of operably connecting a non-certifieddevice to said FAA-certified device comprises: generating an encryptedlicense key for a mobile server in operable data connection with saidFAA-certified device; hosting said license key on a license server;providing authorization credentials of the non-certified device to saidlicense server; downloading said license key from said license server tosaid non-certified device; storing said license key within cache on saidnon-certified device; establishing a data connection between said mobileserver and said non-certified device; providing said license key to saidmobile server for validation; requesting access by said non-certifieddevice to one or more data resources available via said mobile server inoperable data connection with said FAA-certified device; and decryptingand validating said license key by said mobile server before authorizingnon-certified device access to said one or more data resources availablevia said mobile server in operable data connection with saidFAA-certified device.
 12. A system for transmitting and receivingaircraft data communications, the system comprising: an FAA-certifieddevice installed in an aircraft that provides one or more of AHRS, ADC,or flight plan data and is configured to restrict receiving data fromnon-certified devices; a non-certified mobile computing deviceconfigured to send and receive data within said aircraft; a displayconfigured to display data targeted to be received by said FAA-certifieddevice from said non-certified mobile computing device; and configuredto receive user inputs as a confirmation of targeted data, saidconfirmation requiring user input to accept or reject said targeteddata; wherein if said targeted data is accepted, then said targeted datais allowed to change information or functionality of said FAA-certifieddevice; and wherein if said targeted data is not accepted, then saidtargeted data is not allowed to change information or functionality ofsaid FAA-certified device; an FAA-certified gateway hardware device insaid aircraft configured to provide a secure data communicationconnection with said non-certified mobile computing device; saidFAA-certified gateway hardware device configured to provide a securedata communication connection with said FAA-certified device; saidFAA-certified gateway hardware device configured to provide a datafilter or a firewall; and said FAA-certified gateway hardware deviceincluding a gateway services module comprising: a software operatingsystem; software to provide said secure data communication connectionwith said FAA-certified device and said secure data communicationconnection with said non-certified mobile computing device; and softwareto provide targeted data confirmation protocols for determining if saidtargeted data is allowed to change information or functionality of saidFAA-certified device.